From: Mail@JoesLife.org   
      
   On Sat, 4 Mar 2023 23:48:18 -0000 (UTC), Joseph Rosevear wrote:   
      
   Sorry,   
      
   I'm having trouble with Pan.  Here is my message again, with corrections:   
      
   > Hello,   
   >   
   > I have taken a different approach to the problem of encryption.   
   > Initially, like you I tried encrypting locally--within a file system.  I   
   > found that frustratingly difficult.  And also dangerous: Everytime you   
   > encrypt something you run the risk of losing it, *and* you have one more   
   > passphrase to keep track of.   
   >   
   > So I tried instead using the cryptsetup command to make, open and close   
   > LUKS encrypted partitions.  This took a little work to get going, but it   
   > was well worth the effort.  To do this I made a set of scripts:   
      
      luksetup   
      crypt   
      ucrypt   
      lksmnt   
      ulksmnt   
      
   > Script luksetup makes $1 into a LUKS encrypted partition (and destroys   
   > any existing file system).  To do this it prompts you for a passphrase.   
   > Here is the script:   
   >   
   >    cryptsetup \   
   >    --verbose \   
   >    --cipher aes-xts-plain64 \ --key-size 256 \   
   >    --hash sha256 \   
   >    --iter-time 1000 \   
   >    --use-urandom luksFormat $1   
   >   
   > You will need to run scripts crypt and ucrypt directly only   
   > occasionally.  For example you will need them after running luksetup to   
   > make a new file system on the LUKS encrypted partition.  Script crypt   
   > will prompt you for the passphrase.  Here is an example:   
      
      crypt /dev/sda1 bob   
      mke2fs /dev/mapper/bob   
      ucrypt bob   
      
   > Scripts lksmnt and ulksmnt do the mounting and un-mounting of a LUKS   
   > encrypted partition.  They call scripts crypt and ucrypt.  Here is an   
   > example:   
      
      lksmnt /dev/sda1 /mnt/hd bob   
         
      ulksmnt bob   
      
   > I'll quit here without giving the text of scripts crypt, ucrypt, lksmnt   
   > and ulksmnt.  They are, however, short one and two line scripts that use   
   > only the commands and scripts I have named here.  I'll leave them as a   
   > puzzle for you, but let me know if you need help.   
   >   
   > -Joe   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)